# Mercureact default configuration file
# Please make a copy of me before editing

listen:
  - address: 0.0.0.0:9000
  
    # Setup CORS headers
    cors:
      # Access-Control-Allow-Origin
      allow_origin: '*'
      # Content-Security-Policy
      csp: "default-src * 'self' http: 'unsafe-eval' 'unsafe-inline'; connect-src * 'self'"

    # Setup encryption
    encryption:
      cert: foo.pem
      key: foo.key

    # Enable websockets
    websocket:
      enable: true

publish:
  # Assign a UUID to published messages even if one is already set in the message
  overwrite_id: false
  # Reject messages with previously seen IDs
  reject_duplicates: true

subscribe:
  # Allow anonymous subscription for public updates
  allow_anonymous: false

security:
  jwt_secret: "!ChangeThisMercureHubJWTSecretKey!"